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In the Claims 

1 . (Currently amended) A method for detection and correction of secxirity Aoilnerabilities 
in a distributed computing environment, comprising: 

analyzing by a plurality of agents [[a]] one or more software solutions to identify legal 
and illegal external interfaces thereto; 

attempting to access each of said one or more software solution using the identified 
illegal external interfaces; and 

storing a record of any illegal extemal interfaces that allow access to said one or more 
software solutions at a plurality of databases associated with said plurality of agents , wherein for . 
each of said one or more software solutions, at least one separate agent is utilized . 

2. (Previously presented) The method of claim 1, wherein said software solution 
comprises at least two independent software programs interacting to form said software solution. 

3. (Previously presented) The method of claim 1, further comprising: 
automatically deploying a corrective measure to said software solution based upon said 

identified illegal extemal interfaces. 

4. (Original) The method of claim 3, further comprising: 
storing each of said corrective measures in a memory. 
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5. (Original) The method of claim 4, further comprising:' 

making said stored record of illegal external interfaces that allow access, and said stored 
record of corrective measures available to all users of said detection and correction method, on a 
global basis. 

6. (Original) The method of claim 5, wherein said stored record of illegal extemal 
interfaces that allow access, and said stored record of corrective measures is made available on a 
global basis via a network coimection. 

7. (Original) The method of claim 1, wherein said analyzing step includes: 
analyzing an XML description of each legal and illegal extemal interface; and 
mapping each legal and illegal extemal interface into a machine-readable format. 

8. (Currently amended) A system for detection and correction of security vulnerabilities 
in a distributed computing environment, comprising: 

means for analyzing a processor configured to analyze, by a plurality of agents^ [[a]] one 
or more software solutions to identify legal and illegal extemal interfaces thereto; 

means for attempting to access each of said one or more software solutions using the 
identified illegal external interfaces; and 

means for storing a record of any illegal extemal interfaces that allow access to said one 
or more software solutions at a plurality of databases associated with said plurality of agents^ 
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wherein for each of said one or more software solutions, at least one separate agent is utilized . 

9. (Previously presented) The system of claim 8, wherein said software solution 
comprises at least two independent software programs interacting to form said software solution. 

10. (Previously presented) The system of claim 8, fiirther comprising: means for 
automatically deploying a corrective measure to said software solution based upon said identified 
illegal external interfaces. 

1 1 . (Original) The system of claim 1 0, further comprising: means for storing each of said 
corrective measures in a memory. 

12. (Previously presented) The system of claim 1 1, further comprising: 

means for making said stored record of illegal external interfaces that allow access, and 
said stored record of corrective measures available to all users of said detection and correction 
system, on a global basis. 

13. (Original) The system of claim 12, wherein said stored record of illegal extemal 
interfaces that allow access, and said stored record of corrective measures is made available on a 
global basis via a network connection. 
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14. (Original) The system of claim 8, wherein said analyzing means includes: 

means for analyzing an XML description of each legal and illegal external interface; and 

means for mapping each legal and illegal external interface into a machine-readable 



15. (Cvirrently amended) A computer program product for detection and correction of 
security vulnerabilities in a distributed computing environjnent, the computer program product 
comprising a computer-readable storage medium having computer-readable program code 
embodied in the medium, the computer-readable program code comprising: 

computer-readable program code that analyzes [[a]] one or more software solution s by 
[[at]] a plurality of agents to identify legal and illegal extemal interfaces thereto; 

computer-readable program code that attempts to access each of said one or more 
software solutions using the identified illegal extemal interfaces; and 

computer-readable program code that stores a record of any illegal external interfaces that 
allow access to said one or more software solutions at a plurality of databases associated with 
said plurality of agents , wherein for each of said one or more software solutions, at least one 
separate agent is utilized . 

16. (Previously presented) The computer program product of claim 15, wherein said 
software solution comprises at least two independent software programs interacting to form said 
software solution. 



format. 
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17. (Previously presented) The computer program product of claim 15, further 
comprising: 

computer-readable program code that automatically deploys a corrective measure to said 
software solution based upon said identified illegal external interfaces. 

18. (Original) The computer program product of claim 17, fiirther comprising: 
computer-readable program code that stores each of said corrective measures in a 

memory, 

19. (Previously presented) The computer program product of claim 18, further 

comprising: 

computer-readable program code that makes said stored record of illegal extemal 
interfaces that allow access, and said stored record of corrective measures available to all users of 
said detection and correction computer program product, on a global basis. 

20. (Original) The computer program product of claim 19, wherein said stored record of 
illegal extemal interfaces that allow access, and said stored record of corrective measures is made 
available on a global basis via a network connection. 
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21. (Original) The computer program product of claim 15, wherein said computer- 



readable program code for analyzing the software solution includes: 

computer-readable program code that analyzes an XML description of each legal and 
illegal external interface; and 

computer-readable program code that maps each legal and illegal external interface into a 
machine-readable format. 
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